A Comprehensive Approach to Cloud Security Posture Management
summary
Demos show concrete controls and outcomes not abstractions: predeployment IaC scanning plugged into CI/CD, an Azure Policy deny TLS 1.2 that flips from audit to deny and blocks a TLS 1.0 storage deployment, and GCP organization constraints blocking oversized VMs during creation. The stack ties cloud native validation to event driven remediation via functions, maps policies to compliance packs like FedRAMP/NIST/ISO, and surfaces the cost vs MTTR tradeoff and exception management workflows needed to operate these controls at scale.
AI-written summary · about
chapters (10)
- 0:00Introduction and Speaker Background
- 1:46Overview of Cloud Security Posture Management
- 3:25Current Cloud Security Challenges
- 5:33Foundational Pillars of Cloud Security
- 7:03Infrastructure as Code Security Scanning
- 9:44Cloud Native Security Policies
- 11:04Azure Cloud Policy Demo
- 20:22GCP Cloud Policy Demo
- 23:52Event-Driven Security Automation
- 30:05Key Takeaways and Conclusion
related talks
50mArchitecting a secure cloud framework
12mCloud Security from Scratch
48mControlling Clouds: Beyond Safety
43mWalking on Broken Clouds
55mWhat you need to know about security for cloud DevOps
58mCloud Attack Surface Management
45mExploring and managing risks in cloud: a practical journey to cloud security
42mFederal Compliance Panel Discussion